I also throw my nomination to the floor for the inclusion of Darren
Reeds' excellent ip filter stuff. OK, the thing is a loadable
module. Great. Now let me just patch each kernel source tree with
the #ifdef surrounded changes... Another example of a member or
core saying "I don't think this solution is elegant enough" without
coming up with a timely alternative. I remember Darren offering
the filter code last *SUMMER* guys. Where is the "official/pure/perfect"
version from cofe ? Hello ? Anyone there ?
Let's review some facts here:
1) There were at least three different in-kernel filtering packages
mentioned, each reputed to be better than (or at least as good as) the
others.
2) This software is only of use to a small subset of people, namely
those who do or would use NetBSD for routing.
3) None of those people did a bake-off of the various packages.
4) What I said amounted to `This is the way I would like it done.',
*not* `This is the One True Way (tm) of doing it, and none other is
acceptable.'
If you'd like it put in, then I suggest you do the ground work to show
that it *should* be put in (at all, and rather than some other
package); that would be a much better use of time than flaming at us.